Network Security

We are a small ISP with about 600 customers.  Our aggregate through our ASA 5515x hits about 320 mbps. A speedtest shows that it can do about 860 mbps up/down without FirePower.  With a typical Firepower inline configuration, we get about 220 mbps. P...

I have a short term need to use a pair of SFP for inline IPS.  According to the PDF this should not be done. While I understand that if the appliance loses power, we will lose those interfaces, but aside from that, a risk we may have to take, will it...

Good day I just implement the Firesight solution, and I'm having issues because the Firesight drops SQL traffic. This traffic is well known and it´s part of our day to day traffic. I would like to know how can I classify these traffic as well know ...

Hello Team, We can't see the dashboard. 

We would like to know how to block wireshark .exe in firesight. 

In firepower 6.0 we do have option to display a page for websites blocked to user. If the website contains a malware, is there any option for user to see a warning page saying that website contains malware. I have file policy in place for all types o...

Hi there.  i really confused with my intrusion policy block below signature. I dont know what is 1 instances of http - drop

Hi techies, I know this has been asked several times, but I haven't found a solid answer yet.  I am using ASA-5520 with code 9.1 My Public WAN pool is 198.90.7.x/24 and the ASA outside interface is 74.200.11.180. I have a website at 198.90.7.195 and...

Hi, I am planning to migrate our FWSMs to ASA Multiple context. I will have 4 to 5 security context based on the different zones or functions within the network. From the config point of view it does not look very difficult. However, I would like to ...

Hello to everyone! 1) OID I need to know what is explicitly possible w.r.t polling snmp paramaters, i.e. OID's from the IPS ASA-5515-X software IPS module. For the ASA itself this can be performed via command "show snmp-server oidlist", but how on t...

Hi, Currently we have Cisco firewall 5515-X that acts only for filtering but not blocking any suspicious activity. Now, our ISP is connect to the outside interface of this firewall. Let say, if we want to put in the IPS, it must be in front of firew...